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A METHOD, A SYSTEM AND AN OPERATING METHOD OF THE SYSTEM 
FOR DETECTING AND SELECTIVELY ALTERNATING DATA PACKETS FOR 
COMMUNICATIONS SECURITY IN COMPUTER NETWORK 

[Abstract] 

The present invention discloses a navel system to control receiving and 
sending data packet flow in computer network. By controlling the packet flow in 
computer network, it is possible to control a packet flow from a private network to an 
external network, and at the same time to protect the private network from an illegal 
external attack. A user generates a rule base, which is transformed to a set of filtering 
processing language commands. Each rule of the rale base includes data that defines 
whether to approve or deny for source, destination, service packets to pass, and 
whether to record or not record an event. The set of filtering processing language 
commands is installed in a search engine in the computer and executed to function as a 
firewall. The firewall is set such that all traffic to be security-protected that go in the 
network must pass the firewall. 
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*>M?»J»cSsBl!*ixSo iBUc*i-<of±^ j ey^©y7 l 7/Hil[<oA*t?*>S. 
rw^n-fe^fi^ciy^ 110 2*»e>BBife^ix, fflitt/oy^ l l o 6 {CiftA, 

jo^T^y F*JfCfe jy h£*x N ^n-fe^li^n 5/ ^ 111 0 5„ 

*HW*$>tt*ffc&S#l 2EI^$tLTV^o CKZ^n-fejxfi^ns^ 12 0 

2 ^P)0B*fe$n, ffiiJWfi^n 5/^ 1 204 Sdit^ ::t^3- K3&»e>Wbtb 

fcjav^T^y 120 2 s*u 121 0 jc^t^ 

S/^$n-5 0 1 2 1 0iC*3(t5J:b^(0^^^fco7c^(C(±, #CCD 

^fy^Ntty h£tu ^nt^«yay^ 1 2 1 6T#lTt5. ^oy^ 



(27) ttf 10-5,04 168 

12 1 0\Z&ft&tt&<n1feMk&fe-e3b'Dti»£-\a^ 7°nt^li7 , Py^ 12 1 

n^n ^no 2frbmte£ft, mmny'ti y ? i 3 0 4^it^, r r. -cy* 

y 1 3 0 QfrbWil &m<9&iZtlZ>o I2ll^n 7 ^ 1 3 0 8(C*5^T^^ 
y 1 3 0 6fa<bm<0i&tii%, 13 1 OfCjol^T, jt^K^^flfy h 

^(D^^M^y 1 3 0 6 2^M»&ftfc2o0Mtt-#LT*$ft3. JfWHS» 

HWfc<©aWiF«)j|S*r±, 131 2fd*3v^^^-y rt^-tr* h 

£tU /nt^n?^ 13 1 

^\ mi 4HKe:^£*L-C^5„ l6 0^nj'^6O6lOTtj;?|C > frTt&i? 

tfflt5ri^tf^\ roffljHSr^JH-rSfc*^ #/u-/Hi:*fUf-y 
/H~3^-atff@SiJ(7)^ ; &y 14 1 O&JS-sLbtl* d Wr- ^1 ~ 3 fiUfri&O) 

^r*3«?, i&icmw-tZo Sf^i4i4 0 2^e>^^ ftHWtt^py^i 

4 0 4(Cii^ > r 'T^^y 1 4 0 6^f>i^^Jti5o IWWtt^ny^l 

4 0 8 Ki£3^ rctti Lfc^— T'VuT'tfrlEfif^^^-rs :i:iaot, 

y l 4 l ocd-t^— ^/n~3^e>f*— ^ifc<9 l±}$n5o SlfBfi^cy^ 14 1 

e s -CfetLfif, ^oy^l4 16 (C*5^T^ * y 1 406(C1 ^ir 
;ft,5 0 r^J^feS^NoT'fotUi, /nyM4 1 4 fd&^T^ * y 14 0 

mi sm^m-tzt^ /otxi^ny^ 1 50 2 fBMBf* 



■I • 

. (28) #IflO-5 04 1 6 8 

^Py^l 5 04l:8*, n rTTt^y 1 5 0 e^bfit^SltJii^ixSo JfcVT? 

Wiiyo-y^i 50 8i:i^ rrt^^U i 5 o ea^BifliiSftfcfifc&s, 

^151 2izm&. ^z.x^—^;^^(Dm<DmHi)^^tz.^Mz.mirhn 
fefrte^ti&o ^m'^^jxh^tcm^ia^ -fxiyt 151 6tcjo^r^^y 
i 5 0 6rticias-t«> h^nSo ^-e#*^ofc^^f4, ^oy^ 1514 

tC^ol^T^^y 1 5 0 6 rtttlO flS-fey b£;ft-5 0 ^Pt^(i^Dy^ 1518T' 

/P— yWCO— 0!|<b LT, '^fArtOTe 1 ne t If— tf ^©T^t^^^/i 
^fedf-3. P7-f/l'- /K^^JSrWT^TiaW-rS 0 Te 1 n e tiiTCPf- tf 



(29) 



mW-1 0 — 5 04 1 6 8 



T E L N ETt- -fe* 



1 pushbyte ttUfllfF : /^-; hn^r-i /a > 6 
[9] 9^6 I p/q K=i;M*«tttttU 

2 push 6 ^ysCD'jT^MBtDA* : 6 6 

3 eq htgaiS: iP^nhzi^i: 1 

4 pushs[22] ^{tgf^ryi^-^hn^— >a> 1 23 

2 2i>6TCP^Pha;Hf« 

5 push 23 <J^0) l JT^Jm<DA^J : 1 23 23 

TEL NET^Qha;i-S§€ 

6 eq tt«aaS : TC P^a h^JUi: 1 1 

T E L N E T^D h =1 JU<£:£J±$iU 

7 and ^IflS: TCPtTELNETOD 1 

8 btrue drop 3M*tt£*i-«igffc : J-^V ffidfH 

(true) JH&ttgHC5}>« 



JfOO^^y o^— -/a >{dj33&^^> 0 ^5<7)X7"5/^°^joV^TT e 1 n e t 
!g6ro^7 t s'7 p tc:*3^T, Te 1 n e t©TCP^n h a/l'Sr^tr® 2 , 13^ 
2 S.t>*M 



... '• • 

(30) . O&mW- 1 0 — 5 0 4 1 6 8 

y^jol/^X, TCPXOTe 1 ne t (DMjv&^ttl^tl— &$r&fcft^a>$rfflfcd> 

V b£mi&£it^^WLmtkMlZ.ftt&-tZ> 0 £Ui£V), Telnet!)^ 

, fiJBWfcfUR* y hV— ?X*$>Z'<— f-^^zfy^i^— h^s/ M7— ? (VP 

ii, yw— /u-<— ^<7D=i>"7"^^{^oTil^{^^T$tt5 0 Will Bt-^-ft:^ 

ks* l# tttuift fcv n 0 Bt ^b^^-tt^ 0 ^ 7 h7^;^y ^wErarre 

■So 

^-rs^&^-t-So fc$&-rz>m&ia^ ^s/hfi^$n5o s^tt-s^i 



f (31) #$¥l 0 — 5 0 4 1 6 8 



15^ ift^ 

g tT©D iffie-Hellma nSlCffllMbft-S&iiJU— K 

p £T0DD i f f ie-Hel Ima n SiiCfflU Stl-S^ig^ S*a.5* 

S pvt V 

Spub v-^^ia 

B l-i>y&m' 

TB JS^Stife^— >«y^SI 

A fi|J»§l 

R -fe y 3 >H 

i -tr -7 -> a >^-^mmtm 

P #«flyt^"7-H 
ENC X (Y) X^tL/Tffl^^YCOIt^k 
DCR X (Y) X£&i:UTffl^<5Y£>Mtt 

S I G (Y) Y<Pg% 

y y-tr-v^pT^;* h£«&#{fc'7 l =** Y\z$8MrZ>^h 



(32) #i?,1 0-5 04 1 68 

MM. t^r^Uf^ %M £ fix v > & v ^ tWIUT 

1E1 (CA) gtt«HJ#*s*»-C#5^M»c 



*3§BJ tdS^JV $ ftfc Z7y4^ VJ—^&m V v-CV ^3 * 5/ h 7 - 9 (DM 

>ft!7*-/H 6 0 4#^<7}LAN3riiLTtf:* h 1 lc88l*SixT*3 9 , IwMHi- 
77^ -V 1 ^^— /W2^^CQL AN&rilLT*^ h 2 l£gHfc£*l<5o S77-ff? 
/Wi-r^*— hOJ:?*^*^^ 1 6 0 6 (d^£tl5 0 *fc 



(33) <&m.¥-l 0 — 5 0 4 1 6 8 

ttTV>5o (CA1) 1 6 0 2f3\ h l^tN^T-Yir^^— /H {C 

*ft5IfEi (CA) HtiftSo MM 2 (C A 2 ) 161214, h 

7-Y1">^~/V2^LT, 4^9— *y Y\C)V— J r-f>y*^tH 0 **h2^ 
ft^itL (intercept) , Bf-5Ht1-5 0 77^f f ^i-^2lt h 2 dfttt 

^nr^^nfcBf^b^^c^y h£gtfJ&<9, rtt?><75^s/ h&m^-ltir 

•5c ifefrftGOillf tdioV^-Ctt, 7r^t7i— ^2^^ h 2^?)^^ h 1 

-7^-- ^2icx^xmn^^^itRnm-^itmmt. h i&w^ h 2 

o/h^nh^/P (IP) ^>r-.y h^** h 2<<Z.m?>o 7 T 4 t*'<fr 
77^-73 7 (SMLI) i#$tL5c #7r^ "VP;*— H&fCi^fccfc 



•I, * 

(34) SS¥1 0-504 1 6 8 

■ty*>3>^BSE»SrlJI!*&i-S. r;Wco^Tf±lfcKI£a*i-3 0 »flr«>Bt#fl:*;fc 
itftiryv-s ylRtft^tl, #t»yJ/a>^- hB#''i tC$rfc& fc<DtfS£ 

W<)V7~v. y^dl^^i 7Hfc:^$nrV^-5o WTf^^S^^r— Af±, SML 

SML I ^nir^iC^^TftilWBt^fbiS^f^lJfflL^^^prifi^ll^^ 
— ^<DPf-s§-fb£P^#rr5-<<, 77^t7*-/Htt, #J#>iC*^ h 2iC*tLT 

St577^t!)^-/W I PT K^*K«UTV^V^bT-fe5„ U ^« 



(35) 1 0 — 5 0 4 1 6 8 

^tbfcdijo^v 5 ^^ h (BP*>7 r-fir^*— ^2) l 6 0 8icJ;otM$ti 

• ^.^r— J» (Diffie-Hellman scheme) £rffll^5 0 7>f — • ^/l^vV'ji 

nft%^irz> 0 y— * (ip-^^r-r^^^— /n) su^*?^^— > (bp 
^7r-ft-?t-/u2) te*tt-3ft«H»*, ttims p v tWDpv t-efc 

S P ub= g Spvt (mod) p 
D W b= g 0 ""' (mod) p 

B= {g*" (mo d) p} *" (mo d) p 

= g Spv tD p„ d) p 

B= { g Sprt (mo d) p } (mo d) p 



(36) WftW- 1 0 — 5 0 4 1 6 8 

= g s P „Dp, (mo d ) p 



7r-('^r , 7^-— /Hi. I P7 i^oj: 9 hco 1 ot & 
^ot-tS^MVx^^^' (binding) SrWLTV^»m«Jie><CV\ Hi 7 HI 

;nil, h 2tDBf-^-ft:7r-r-y , 7^-— ^r'ft?*- /i-2 -e£>5 ^ £ fc 

ftbft</\> tfv?^^— ht-<75±^>KD7 7'rt l 7^— /K7>=fc?ft. ^ 

y^^li'b, nt^-fb-tr^i/a J: 9(c1-5fc&{c&oT^fttm 

t£ftbftv\, i<D£9ft, ^->7^it77^f7*- h 



t. •' 

(37) , 1 0 — 5 04 1 6 8 

frZt, *r*tf±, ls^m^bftZ>3m<om, BPtty^a^HRtKHj' 

[p]#^Ppw±l^$tbT^5o r<£>Bt#y V y Kii, l*t(±2£i±« > y — 

^dsntT"5Ttg*-fe ^ ~> h <om^k(Dtcit><Dm-%-it* y ^ KSr-^t? (sp*> 

DES, FWZ1, RC4, RC5, IDEA, MJ//WDESf) 0 |ty y $> 

Bf^ty y y K£ra£p (IP*)DES, FWZ1, RC4, RC5, IDEA, h 
U/^DESf) 0 y yt-i'^^i^ hy yy K (message digest method 
) (gp^>MDy y s/ K) 3g=L< (4^ ^/ir— iz-^^y y 2/ K (message integrity 
method) fi N y — X^HfyBjlg^^— ^fife^SrH^rt-SfcfeW 1 *fcf* 2 £JL±<D 

y y^ K*fc«r^=fy x^^tp (ip-bMDs, sha?) 0 t*— ^fi^mn 

, y y±— ~J(0— $$i£tct-£'£X<DB%-%r/^y is a. (cryptographic hash) C9ff^£ 

r^firi?*-^lB**A.fc*y ^y-y^y'v?^y h^«ffc#fci-5»^^f* 
Afca^^**— /^tB^fcfc** hy-y^-y^^y mc^l-c^s 

o 



(38) l&WtW- 1 0—5 04 1 6 8 

"te-yi/aZ/T* — ^Bs : #'fbli (session data encryption key) E v 

t> 9 1 Oiii? 5/ >"r — f&dkM (session data integrity key) I 
Sot, -fey fa VtSRteOTW£5f-^£*L<5o 
R = E+ I 

±yi/=i>mte, KH^yyK (SP*>«SF*fb^ y y K) SlMDyy^K, */c 

y— A-efcSo ^e^s^fi. Hf-JHfcy y y KsrMDyyy Kiaot^it $ 

D5(Cj;oTiiiiR$*t, SIG (R) lC±otSSix5-fey 

?>tl5o t-y->ayRiS IG (R) COll^-^-^-ttfi, &V^T?$g*8&;h,;fc'<— 

y * «rr b .Rtf^ - v ^ >- v^ss c <Dm&& t>& <t o -c?fM £ *Lfc« & a§ v ^ -c uf # 



(39) l 0 — 5 0 4 1 6 8 

ENCw (R+ S I G (R) ) 

fc^t" •S^^icyr^^r^^- — Mz. «t o TUfr £ ti 5 y° o i? Sr^-f-iS w</u 

WT?f±, -fey^H y^— P&m&mftirZtciibiz. I p S EC^fW<sM£ix5o 
Wtui-^fc J; 5 y — XR&X j y a V^t> £ fct>*ir > v- a V§|R 

ay«R«:Jfi^TR£#flifttra^fc$ix5o iHW$tt5^y Mi, #ii<DTC 
p/i P^s/ M:iffi«>-agf& Lfcfc 3 0 rev^y Mi, *1n&v&Ht 

*ix»±i(HHk*ix*i^ yrr^ MtP^i^ Hf^{fc£n<5Bf#{[^^ MH5# 
l?;fc5 0 ? y T^drX hSft£f± I P^^&OTCP/UDP^s^^tfo ^ 



(40) 



0—5 04 1 68 



fy^l 8 0 0) 0 teffl£*L595$ttt, 'tyy b<D* J T'RXfzfv y=uu<D#J 
rf (SP^RPC, UDP, TCP, I CMPf ) Kf£o-C*5 0, £IT©±547 
^-A-K£^#5 0 fi|]*>, 0iJxtt\ IP— ID (—95^(75^.) , RPC— XI 
D, RPC— PROGNUM, TCP— SEQ, TCP— ACK, UDP-LE 
N, I CMP— TYPE, I CMP— CODE, RTfil P— PROTOffcS, 
*tI*J^A, ir jy ^G^tt I RTfs<lr y V (7^— ^gfcfrM^S/ 

S I G (A+ I +M) 
8 0 6) „ '<>ry Y\zM%* h^ii*Pi--5r <bfi, x — ^ cofefecD * f cM 

•l^fflfTfiC8 If jy htf*, i p— i D(Of±t8 tf;y h£:tt£iM.5„ 
tl©1^ll^^T^l 6 \fy h^TCP-CSUM7y-/uraP 

•&<754 t'y hd^§nft^TC P-X 2=^HCftttt5 (^iXttSfS 

tf^Oll 1 6 tfy F^WI^ffl^TUDP-C SUM7>f-/W K(C 
iiAD^^L, t ©UD P-C S UM7 ^ -;V 0 tfcSi^ii, ^tiClOt 
tlill^ffl^r UD P-C S UM7 ^ -/V Kl:, UDP-SPORPMUDP 



(41) 



l&mW-l 0—5 0 4 1 6 8 



— D PORT7-f — A* K^ilAO £2x5. 

6 t°y httUDP-LEN7^-;UKICfett$tl5„ 

E N C (e»a) (M) 
(X^S/^l 8 10). 

DCRw (ENCm (M) ) 
f^fc'y h^-jry h^y^*»?>ttm*ix5 (^^1 9 0 4) o &V> 

p< K^fflV^T^fe^tLS (^7^1 9 0 6) . mttJEAT^>«tp{-*Sn 

•So 

S I G (A+ I +M) 

ftt>tltz'&, htmbtiZ frTyfl 910), §fcUfcV>i§£- 

f±, MifflaH^ixS (^7^7'1 9 12). 

miieiraLfcct yr^^^^r— /u&ffijjtfc^s' YV—ir*-f a J^9 V 



•I • 

(42) . #«?1 0-5 04 1 6 8 

mti<Dm&^&\,^xi>, s<—zsy?4iMm<D>smi^ fei^sr^^- 

?l3d*ft2 0H{C^$tb-C^3 o PHM K<7)fatL/5^^r<Diifff@^ (peer) GDfc 

7 — i a*, 77^t * ^ 2 ^*j~r 3-<— y ^ ^MttSr* tt 



■I 

(43) #f?1 0-504 1 68 

So v^y y y^x m*. y— x^<— v^y^issti d, t 1 ^^^^— 
vv?<kMm i d, Bt#y y h\ «iy y ^ K> stflvroy y ^ K£«a&> 

i/ v y it^^e r. h t£ rtnmz h^^t^^a, mm $ tvtzmw.m-£ tc \zm s 

y n c Zm^lcmZMfc, !J7xx KcCA^Hil D7^-^ K£rii;frn"t~<5o 
r (Dmtnte y -y -a- K(± t*<nm&W.%r zm?k Lt v ^ U ^rix^ iot7 

7^f')i~^2#77'ft!)t-/H^f ) ©^tW5:^I*t5i 
mm (CA) It (Bp-bRSA») WIDt'feSo Z\<D* 5/ir-v?^(t^ofcir 
77^t^^— /H f4^<7X— ^5/y<&§I^S pub ^77-ft7t^2 

fi-<— ~> 5/ y ^iSoM^ Sr^E/SI" -S^n-trx-efoSo 77'ft"7t-/H 
t^LTfi, CAl (1 6 0 2) ^ 77^t^^- /HO^- ^?/y^P?Sli ( 
I16B) ^56ISi- 

, CAl, EP^^r^^ry^— /nffl^lSliE^ (CA) i^«C A^§|®£§;tt 
t^5, r«n*acA^ii[D v y-^->^^^iispubMiP 

T K^ifcliy- XT KU-.x£-aA,T:-^5 0 y— x^<— ?<&fflM<D 



(44) M?1 0-5 04 1 6 8 

S I G ( S pub) 

(4, t©7 7^t!>t-/K BP*>7r-r -Ir?*— /n ^^Wgi (Sp 
^r*;i~ A"2 f±, t©7- ;*£t:7t -fir ;n cogrfc:&^<— 

^ ro^ttdSitl* ot#t^5o #tt<75 LAN* fcfiWA Nit^^tHW« 

v^*o y^-z^^t 0 ^-^ (pc) 210011 ^©{sit±m?iiyy 



■I ■• 

(45) t&mW- 1 0 — 5 0 4 1 6 8 

0 4«P^yf5rol:tffl$tl5. r^PCIi^y h[7 — ^ 1 6 0 6(C^ 
^$nT*5*9, 77^ + ^-^2 10 2S:^Ut, iftW^telLhiJ-— '<*fcfi 

77-f -V"7^— /Hl^t5^7-f7y hm<D±yi^3 — ^^m^n-fe^fi 

, 7 7 ^f9*- «t577'ft7*'- /K^tUdTOLTV^o L3>U 
T^So iStfr (name) , V y h\ B^? h\ MD^ V y Y 



(46) 0—5 0 4 1 6 8 

otffl^tns^ isf^yy K, ity KStmiD^ y y Kfco^-cr±#iWte 
mm bfc c ^ !7- Ky y s> K«> <7— Kwnt^kKiR lt ^oBf-^-y y y 

ENCw (P) 

<b t"— y #93*ib*0v<— -> y y y t -r y * — ^/ ? r << -y y 

^2 (12 01) Kmhn^—^^mU^tct<DX^^ 0 t^tV^ 
—i/3 V-<— ~> y y 2j|S§S IDIt ;£PJ£B»c7)i? y > a 7 r^f i"7^- 

o 

S I G (T + P + TB) 

y y^ h^ft^b^fc^, 7r^t"7t-/H4, y 7 4 ris hwy— ^ 
^-Vy^^iSIS p u b^tSo -<-i/y?mBRvmm£ntc 

#5. aifcvp^^i:, 77^ iry^-— /H4y y^* h^m^m 



(47) : #1^10-5 04 1 68 

ENCcwo (R + S I G (R) ) 
S I G (U + TB) 

T*£>5 0 Ld>U 7 7JT 



(48) 



¥fWt¥-l 0 — 5 04 1 68 



^iCCA^HSStl D7^-;UK^ffl^5 0 ^<7>~ tf*B2 3 H<^*f^I#^PpcO 
X\>^Z>?7<<Tl/ Y\^&Z>MWM (CA) ft (gp-fbRSAgt) ©IDtfcS. 

S I G (Dpub) 

I PT Ki^fi, 77^f l )t-;^'<-7!y^^WD pub £<Z5|H3<zw >- 
K £5£SB-r S re ft * tt-C 

77^t9t- /l^feOfgSEcDfcft^T 1 '— *£$ttSSlofc£# x ^7-TT>- 



<»>< ■ * 

(49) .W&W- 1 0 — 5 0 4 1 6 8 

31b-CSSEE^^T-r5 0 ^jy-fe— ^©Mftt, # 2 3 Bl0>Tfl!l05#fcl#^BJ0>-h 
l^$ntv^ 0 yir— ^f±, flHKfc £;ixfc^* 17— Kftt*S*j&*£* 

ENCwd (P) 

!7-KP, &t>*^ff £*Lfc-<— v-2/^=^— TBrom^fc>-&*7£}p.UT, MD^ 
S I G (T + P + TB) 

•So 



•»■< 
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0 — 5 0 4 1 6 8 
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